Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
snobs
New Contributor II

Fortigate: Retrieve file from quarantine?

Hello,

 

so I set antivirus to send infected files to quarantine on the local disk of an Fortigate FG-501E. But how can I retrieve that file in case of a false positive?

 

Regards
2 REPLIES 2
Baptiste
Contributor II

Hi 

it seams you can't if you choose "file quarantine"

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/445796/enabling-content-disarm-and-recon...

 

2 FGT 100D  + FTK200

3 FGT 60E  FAZ VM  some FAP 210B/221C/223C/321C/421E

2 FGT 100D + FTK200 3 FGT 60E FAZ VM some FAP 210B/221C/223C/321C/421E
binnyrog

Hello,

 

There is no option to retrieve the files sent to Quarantine. Even in the case of False Positives, the files are permanently lost and you should take care of such files. You can disable the Send to Quarantine to keep your files safe.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors